Browse CVEs

HIGH 7.1 CVE-2025-58844 Cross-Site Request Forgery (CSRF) vulnerability in Subhash Kumar Database to Excel database-to-excel allows Stored XSS.This issue affects Database to… Mitigation only Fix from $1,9502025-09-05 HIGH 7.1 CVE-2025-58845 Cross-Site Request Forgery (CSRF) vulnerability in ChrisHurst Bulk Watermark bulk-watermark allows Reflected XSS.This issue affects Bulk Watermark: f… Mitigation only Fix from $1,9502025-09-05 HIGH 7.1 CVE-2025-58846 Cross-Site Request Forgery (CSRF) vulnerability in Dejan Markovic WordPress Buffer – HYPESocial. Social Media Auto Post, Social Media Auto Publish an… Mitigation only Fix from $1,9502025-09-05 HIGH 7.1 CVE-2025-58847 Cross-Site Request Forgery (CSRF) vulnerability in Yaidier WN Flipbox Pro wn-flipbox-pro allows Reflected XSS.This issue affects WN Flipbox Pro: from… Mitigation only Fix from $1,9502025-09-05 HIGH 7.1 CVE-2025-58848 Cross-Site Request Forgery (CSRF) vulnerability in aakash1911 WP likes wp-likes allows Reflected XSS.This issue affects WP likes: from n/a through <=… Mitigation only Fix from $1,9502025-09-05 HIGH 7.1 CVE-2025-58843 Cross-Site Request Forgery (CSRF) vulnerability in David Merinas Auto Last Youtube Video auto-last-youtube-video allows Stored XSS.This issue affects… Mitigation only Fix from $1,9502025-09-05 HIGH 8.8 CVE-2025-58833 Cross-Site Request Forgery (CSRF) vulnerability in INVELITY Invelity MyGLS connect invelity-mygls-connect allows Object Injection.This issue affects … Mitigation only Fix from $1,9502025-09-05 MEDIUM 5.4 CVE-2025-58818 Cross-Site Request Forgery (CSRF) vulnerability in SwiftNinjaPro Developer Tools Blocker swiftninjapro-inspect-element-console-blocker allows Cross S… Mitigation only Fix from $1,6002025-09-05 HIGH 7.1 CVE-2025-58807 Cross-Site Request Forgery (CSRF) vulnerability in Dsingh Purge Varnish Cache purge-varnish allows Stored XSS.This issue affects Purge Varnish Cache:… Mitigation only Fix from $1,9502025-09-05 HIGH 7.1 CVE-2025-58809 Cross-Site Request Forgery (CSRF) vulnerability in Nick Ciske To Lead For Salesforce salesforce-wordpress-to-lead allows Reflected XSS.This issue aff… Mitigation only Fix from $1,9502025-09-05 MEDIUM 5.4 CVE-2025-58801 Cross-Site Request Forgery (CSRF) vulnerability in KCS Responder responder allows Cross Site Request Forgery.This issue affects Responder: from n/a t… Mitigation only Fix from $1,6002025-09-05 HIGH 7.1 CVE-2025-58806 Cross-Site Request Forgery (CSRF) vulnerability in Tom Longridge WordPress Error Monitoring by Bugsnag bugsnag allows Stored XSS.This issue affects W… Mitigation only Fix from $1,9502025-09-05 MEDIUM 5.3 CVE-2025-9616 The PopAd plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.4. This is due to missing or inc… Mitigation only Fix from $1,6002025-09-04 HIGH 8.8 CVE-2025-20326 A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) Software and Cisco Unified CM Session Mana… Unified Communications Manager 15su3+ Fix from $1,9502025-09-03 HIGH 8.6 CVE-2025-0610 Cross-Site Request Forgery (CSRF) vulnerability in Akınsoft QR Menü allows Cross Site Request Forgery. This issue affects QR Menü: from s1.05.06 bef… Mitigation only Fix from $1,9502025-09-01 HIGH 8.8 CVE-2025-9747 A vulnerability has been found in Koillection up to 1.6.18. Affected is an unknown function of the file assets/controllers/csrf_protection_controller… Koillection 1.7.0+ Fix from $1,9502025-08-31 HIGH 7.1 CVE-2025-48359 Cross-Site Request Forgery (CSRF) vulnerability in thaihavnn07 ATT YouTube Widget att-youtube allows Stored XSS.This issue affects ATT YouTube Widget… Mitigation only Fix from $1,9502025-08-28 MEDIUM 5.4 CVE-2025-48362 Cross-Site Request Forgery (CSRF) vulnerability in Saeed Sattar Beglou Hesabfa Accounting hesabfa-accounting allows Cross Site Request Forgery.This i… Mitigation only Fix from $1,6002025-08-28 HIGH 7.1 CVE-2025-48353 Cross-Site Request Forgery (CSRF) vulnerability in dactum Clickbank WordPress Plugin (Niche Storefront) clickbank-niche-storefronts allows Stored XSS… Mitigation only Fix from $1,9502025-08-28 MEDIUM 5.4 CVE-2025-48357 Cross-Site Request Forgery (CSRF) vulnerability in Theme Century Century ToolKit century-toolkit allows Cross Site Request Forgery.This issue affects… Mitigation only Fix from $1,6002025-08-28 HIGH 7.1 CVE-2025-48351 Cross-Site Request Forgery (CSRF) vulnerability in PluginsPoint Kento Splash Screen kento-splash-screen allows Stored XSS.This issue affects Kento Sp… Mitigation only Fix from $1,9502025-08-28 HIGH 7.1 CVE-2025-48325 Cross-Site Request Forgery (CSRF) vulnerability in shmish111 WP Admin Theme wp-admin-theme allows Stored XSS.This issue affects WP Admin Theme: from … Mitigation only Fix from $1,9502025-08-28 HIGH 7.1 CVE-2025-48343 Cross-Site Request Forgery (CSRF) vulnerability in Aaron Axelsen WPMU Ldap Authentication wpmuldap allows Stored XSS.This issue affects WPMU Ldap Aut… Mitigation only Fix from $1,9502025-08-28 HIGH 7.1 CVE-2025-48321 Cross-Site Request Forgery (CSRF) vulnerability in dyiosah Ultimate twitter profile widget ultimate-twitter-profile-widget allows Stored XSS.This iss… Mitigation only Fix from $1,9502025-08-28 HIGH 7.1 CVE-2025-48320 Cross-Site Request Forgery (CSRF) vulnerability in cuckoohello 百度分享按钮 baidushare-wp allows Stored XSS.This issue affects 百度分享按钮: from n/a… Mitigation only Fix from $1,9502025-08-28 HIGH 7.1 CVE-2025-48311 Cross-Site Request Forgery (CSRF) vulnerability in OffClicks Invisible Optin invisible-optin allows Stored XSS.This issue affects Invisible Optin: fr… Mitigation only Fix from $1,9502025-08-28 HIGH 7.1 CVE-2025-48307 Cross-Site Request Forgery (CSRF) vulnerability in kasonzhao SEO For Images seo-for-images allows Stored XSS.This issue affects SEO For Images: from … Mitigation only Fix from $1,9502025-08-28 HIGH 7.1 CVE-2025-48308 Cross-Site Request Forgery (CSRF) vulnerability in nonletter Newsletter subscription optin module newsletter-subscription-widget-for-sendblaster allo… Mitigation only Fix from $1,9502025-08-28 HIGH 7.1 CVE-2025-48309 Cross-Site Request Forgery (CSRF) vulnerability in web-able BetPress betpress allows Stored XSS.This issue affects BetPress: from n/a through <= 1.0.… Mitigation only Fix from $1,9502025-08-28 HIGH 7.1 CVE-2025-48109 Cross-Site Request Forgery (CSRF) vulnerability in Xavier Media XM-Backup xm-backup allows Stored XSS.This issue affects XM-Backup: from n/a through … Mitigation only Fix from $1,9502025-08-28